NVD

Id
85166  
Name
CVE-2016-5401  
Description
Cross-site request forgery (CSRF) vulnerability in Red Hat JBoss BRMS and BPMS 6 allows remote attackers to hijack the authentication of users for requests that modify instances via a crafted web page.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-04-27  
Published
2017-04-20  
Modified Date
2017-04-26  
Seq
2016-5401  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
415108 85166 CVE-2009-5147 [oss-security] 20150728 Re: CVE request: Two ruby "dl" vulnerabilities fixed in ruby-1.9.1-p129  View
415109 85166 CVE-2009-5147 https://bugzilla.redhat.com/show_bug.cgi?id=1248935  View
415110 85166 CVE-2009-5147 https://github.com/ruby/ruby/commit/4600cf725a86ce31266153647ae5aa1197b1215b  View
415111 85166 CVE-2009-5147 https://www.ruby-lang.org/en/news/2015/12/16/unsafe-tainted-string-usage-in-fiddle-and-dl-cve-2015-7551/  View
415112 85166 CVE-2009-5147 [oss-security] 20150728 Re: CVE request: Two ruby "dl" vulnerabilities fixed in ruby-1.9.1-p129  View
415113 85166 CVE-2009-5147 https://bugzilla.redhat.com/show_bug.cgi?id=1248935  View
415114 85166 CVE-2009-5147 https://github.com/ruby/ruby/commit/4600cf725a86ce31266153647ae5aa1197b1215b  View
415115 85166 CVE-2009-5147 https://www.ruby-lang.org/en/news/2015/12/16/unsafe-tainted-string-usage-in-fiddle-and-dl-cve-2015-7551/  View
418105 85166 CVE-2017-3503 http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html  View
418106 85166 CVE-2017-3503 97891  View
418107 85166 CVE-2017-3503 http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html  View
418108 85166 CVE-2017-3503 97891  View

Related JVN